Forum Discussion

J_Bailey's avatar
J_Bailey
Copper Contributor
Feb 20, 2019

Any way to view log data being collected?

Hi,   Got my first Data Source and Log Collector up and running yesterday, and have collected 221 logs, but no data is being displayed on my dashboard.  Is there a way to view this data and re-impo...
Cloud App Security
Cloud Discovery
Danny Kadyshevitch's avatar
Danny Kadyshevitch
Former Employee
Feb 27, 2019

Hi,

 

I believe J_Bailey has already resolved this issue.

J_Bailey - can you post here what did you do in order to view the collected data?

 

Thanks,

Danny.

J_Bailey's avatar
J_Bailey
Copper Contributor
Feb 27, 2019

I haven't done it yet but was suggested in using the custom upload and making a snapshot report I believe to try and filter the data. I need to do a few things first, since there is no native syslog export from Watchguard, I want to make sure the data I'm uploading is going to be in same format. I'm writing  a generic syslog collector and am hoping to have some results by end of week.  Thanks for following up.

  • Oztourist's avatar
    Oztourist
    Copper Contributor
    Nov 29, 2020

    J_Bailey 

    Hi mate, 

    I am running Watchguard XTM firewalls, I was wondering if you made any progress and also noticed there is now native support for Watchguard XTM devices.

    • Boris_Kacevich's avatar
      Boris_Kacevich
      Former Employee
      Nov 30, 2020

      Oztourist 

       

      Watchguard XTM log format is now supported out of the box.

       

      Best,

      Boris K

      • stierer54's avatar
        stierer54
        Copper Contributor
        Dec 07, 2020

        Boris_Kacevich Saw this too, although have difficulty getting it to work..

        I've gone down the route of setting up Ubuntu in Azure with a Docker log collector but Cloud App Security doesn't seem to pick anything up.

        Firebox seems to be configured to send logs to it correctly.

        Google doesn't come back with much 😞 

Resources